FBI seizes LeakBase cybercrime forum, files of 142,000 members
Digital forensics
The FBI has seized the LeakBase cybercrime forum, a necessary online forum frail by cybercriminals purchase and promote hacking tools and stolen files.
This seizure motion is section of a world joint operation coordinated by Europol, identified as “Operation Leak,” that eager laws enforcement companies in 14 countries.
On March 3 and 4, the FBI and laws enforcement brokers shut down LeakBase by seizing two of its domains, posting seizure banners, and warning LeakBase members of the seizure after gathering extra proof.
Police officers and investigators also executed search warrants, made arrests, and performed interviews in the United States and across Australia, Belgium, Poland, Portugal, Romania, Spain, and the UK.
LeakBase’s domain (leakbase[.]la) now shows a survey mentioning “This website has been seized by the Federal Bureau of Investigation (FBI) as part of an international law enforcement operation.”
The seizure banner also notes that the forum’s database and all its contents, in conjunction with IP logs and non-public messages, can be frail for “evidentiary purposes” in future investigations.
“All forum content including users’ accounts, posts, credit details, private messages and IP logs have been secured and preserved for evidentiary purposes,” the attention reads. “Attempts to access, alter, or interfere with this site may result in additional criminal offenses. This action was possible because of international law enforcement and private sector coordination involving the partners listed below.”
Leakbase seizure banner (BleepingComputer)
The domain nameservers acquire also been switched to ns1.fbi.seized.gov and ns2.fbi.seized.gov, the nameservers frail by the FBI when seizing domains.
“On 3 March, law enforcement authorities carried out coordinated enforcement actions across multiple jurisdictions, including arrests, house searches, and ‘knock-and-talk’ interventions. Around 100 enforcement actions were conducted worldwide, including measures against 37 of the most active users of the platforms,” Europol added as of late.
“On 4 March, authorities moved to the technical disruption phase, seizing the forum’s domain and replacing it with a law enforcement splash page. The operation now enters a prevention phase aimed at deterring further criminal activity and raising awareness of the consequences of engaging in cybercrime.”
Full of life since 2021, LeakBase changed into once launched as a mission supported by the ARES possibility neighborhood, and it continuously grew its person harmful to bigger than 142,000 members following the closure of the Breached hacker forum.
The forum changed into once free to join and supplied entry to databases, a marketplace for promoting leaks, exploits, and other cybercrime services and products, and an escrow fee blueprint. Besides, it also hosted areas for programming, hacking pointers, social engineering, cryptography, and opsec guides.
At present time’s announcement follows the disruption of RaidForums in 2022 and BreachForums in 2023, two cybercrime marketplaces that preceded it, along with the BreachForums founder’s conviction and sentencing in 2025.
